Senior Product Security Engineer
- Role
- Security
- Experience
- Senior
- Employment
- Full-time
Open to Anywhere in Americas & APAC. Set where you work from to check your eligibility.
No BS summary
Senior product security engineer (8+ years) with substantial appsec experience for large-scale data platforms. Must be hands-on coding day-to-day (appsec/devsecops): build encryption, authentication/authorization, RBAC, key rotation and ship high-throughput features. Candidates must be based in the Americas or APAC.
Core skills
Required skills
Optional skills
Role
- Our first product security-focused engineer
- Takes high-level direction (e.g., "identify top five security-related gaps for AX") and drives to results
- Success looks like a LanceDB platform that follows security-related best practices, and an ongoing partnership with other engineers to continuously enhance our security posture in all areas of the product
Day-to-day
- Drive new security-related functionality such as key rotation, user-managed API credentials, RBAC, and the like
- Select, deploy and tune security tooling across all relevant repos and environments, ensuring full coverage
- Apply relevant industry trends, best practices, and specific vulnerabilities to our product
Qualifications
- 8+ years as a software engineer, with a significant portion of that time working on appsec-related work
- Experience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancy
- Ideally have experience working code in Rust and/or C++. Other languages experience are also OK as long as you can come up to speed on Rust quickly.
- Experience building encryption, authentication, and/or authorization features for shipping products at high throughput
- Previous experience working at an early-stage startup
- Demonstrated ownership of ambiguous projects with minimal guidance
- Strong written and verbal communication (can drive alignment across teams)
- Comfortable using data (metrics, experiments, usage) to guide decisions
- Experience contributing to or working with open source communities
Please apply for this role only if you meet all of the above qualifications, and agree with the day-to-day responsibilities. Of particular note: qualified candidates for this role will have day-to-day coding responsibilities - this is an appsec and devsecops role, not an infosec or platform security role.
About LanceDB
LanceDB is a developer-friendly, open-source data platform for multimodal AI. From hyper-scalable vector search to advanced retrieval for RAG, from streaming training data to interactive exploration of large-scale datasets, LanceDB is the best foundation for your AI workloads.
What you'll do
- Take high-level direction (e.g., "identify top five security-related gaps for AX") and drive to results
- Partner with other engineers to continuously enhance product security posture
- Drive new security-related functionality such as key rotation, user-managed API credentials, RBAC
- Select, deploy and tune security tooling across all relevant repos and environments, ensuring full coverage
- Apply relevant industry trends, best practices, and specific vulnerability knowledge to the product
- Day-to-day coding responsibilities (appsec and devsecops work)
What they require
- 8+ years as a software engineer, with a significant portion of that time working on appsec-related work
- Experience working on large-scale data platforms (e.g., databases, data infra, ML/AI systems), including work on concurrency and multitenancy
- Experience building encryption, authentication, and/or authorization features for shipping products at high throughput
- Ideally have experience writing code in Rust and/or C++; other languages acceptable if able to ramp on Rust quickly
- Previous experience working at an early-stage startup
- Demonstrated ownership of ambiguous projects with minimal guidance
- Strong written and verbal communication (can drive alignment across teams)
- Comfortable using data (metrics, experiments, usage) to guide decisions
- Experience contributing to or working with open source communities
- Please apply only if you meet all of the above qualifications and agree with the day-to-day responsibilities
Benefits
- Offers Equity
developer-friendly, open-source data platform for multimodal AI